News

IIS Cumulative Patch Released

Microsoft Corp. issued a cumulative patch this week for its Internet Information Services Web server that fixes four critical new vulnerabilities and six other newly discovered bugs.

It is the largest collections of new bug fixes for IIS outside of a service pack in the last two years. The last cumulative patch for IIS was in August and fixed five flaws. A May 2001 cumulative patch rollup fixed three problems.

As a cumulative patch, the fix also includes all previously released fixes for the standalone IIS 4.0; IIS 5.0, which ships in Windows 2000; and IIS 5.1, which ships in Windows XP Professional Edition. Microsoft says it didn't include Windows .NET Server's IIS 6.0 in the general patch because it is a beta product and is not intended for production use. Microsoft was sending fixes directly to the limited number of customers officially running IIS 6.0 in production environments.

The security bulletin and patch are available at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-018.asp.

All four of the critical flaws involve buffer overflows. The other problems involve cross-site scripting, a denial of service via an FTP status request and an access violation in URL error handling.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • SharePoint Framework 1.8 Now Generally Available

    Microsoft this week announced that SharePoint Framework 1.8 had reached "general availability" status, although some features are still at the preview stage.

  • How To Create Office 365 User Accounts in Bulk

    Manual account creation can be tedious, time-consuming and prone to human error, especially if you have more than a handful of Office 365 users to set up. Brien shows you a better way.

  • System Center 2019 Reaches General Availability

    System Center 2019 has now reached the "general availability" product stage, Microsoft indicated in a Thursday update.

  • SharePoint Online Users Getting News Improvements This Month

    Microsoft plans to roll out new capabilities for SharePoint Online users this month that will add greater control over how News articles appear in SharePoint sites, according to a Wednesday announcement.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.